> Markdown version of [/jobs/ext/1409671-senior-pki-engineer](https://www.wearedevelopers.com/jobs/ext/1409671-senior-pki-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior PKI Engineer - **Company:** HCC, Inc.. - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $145,600.0 - $176,800.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Amazon Web Services, User Authentication, Automation of Tests, Cloud Computing, CompTIA Security+, Cyber Security, Information Systems, Digital Signature, Disaster Recovery, Domain Name System (DNS), Federal Information Processing Standards (FIPS), Hardware Security Module, Identity and Access Management, Python (Programming Language), Key Management, Lightweight Directory Access Protocols (LDAP), Microsoft Software, Windows Servers, Multi-Purpose Internet Mail Extensions (MIME), Public Key Infrastructure, X.509, Windows PowerShell, Azure Active Directory, Zero Trust Network Access, Scripting, Transport Layer Security, Enterprise Software Applications, Information Technology - **Published:** July 23, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=b21ac1a8d88eec60 ## About the Role * Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or equivalent experience. * Minimum of 8 years of IT infrastructure or cybersecurity experience. * Minimum of 5 years of enterprise PKI engineering experience. * Experience administering Microsoft Active Directory Certificate Services (AD CS) or comparable enterprise PKI platforms. * Strong understanding of X.509 certificates, Certificate Authorities, OCSP, CRLs, TLS/SSL, digital certificates, and cryptographic key management. * Experience with Hardware Security Modules (HSMs). * Experience with Windows Server, Active Directory, DNS, LDAP, and enterprise authentication. * Experience developing PowerShell or Python automation scripts. * Strong troubleshooting and analytical skills. * Excellent written and verbal communication skills. * U.S. Citizenship., * Experience supporting federal civilian or DoD agencies. * Experience with Federal PKI (FPKI), PIV/CAC authentication, and enterprise identity management. * Experience with AWS Certificate Manager, AWS Private CA, Azure Key Vault, AWS CloudHSM, or similar technologies. * Familiarity with Zero Trust Architecture and Identity, Credential, and Access Management (ICAM). * Relevant certifications such as CISSP, Security+, CCSP, Microsoft, AWS, or PKI-related certifications. ## Description HCC Consulting is seeking a Senior PKI Engineer to support the modernization, administration, and optimization of enterprise Public Key Infrastructure (PKI) services for a federal customer. The successful candidate will be responsible for maintaining secure certificate services, improving PKI resiliency, implementing modern cryptographic solutions, and supporting enterprise identity and authentication services. Responsibilities * Design, implement, and administer enterprise PKI environments. * Manage Root and Issuing Certificate Authorities (CAs), Online Certificate Status Protocol (OCSP) Responders, Certificate Revocation Lists (CRLs), and Registration Authorities. * Administer certificate lifecycle management, including certificate issuance, renewal, revocation, recovery, and expiration monitoring. * Configure and maintain Hardware Security Modules (HSMs) and cryptographic key management solutions. * Support TLS/SSL certificates, code-signing certificates, S/MIME, client authentication, server authentication, and digital signature services. * Integrate PKI services with Active Directory, Microsoft Entra ID, cloud platforms, enterprise applications, and identity management solutions. * Monitor PKI health, troubleshoot certificate trust issues, and resolve authentication and encryption problems. * Implement certificate lifecycle automation using PowerShell, Python, or other scripting tools. * Support disaster recovery, backup, restoration, and high-availability configurations for PKI infrastructure. * Develop and maintain PKI architecture documentation, standard operating procedures, and technical implementation guides. * Ensure compliance with applicable federal cybersecurity standards, including NIST and FIPS requirements. * Collaborate with cybersecurity, infrastructure, network, and application teams to support secure enterprise operations. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [This Machine Ends Data Breaches](https://www.wearedevelopers.com/videos/574-this-machine-ends-data-breaches) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Going Beyond Passwords: The Future of User Authentication](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Pragmatic Blockchain Design Patterns: Integrating Blockchain into Business Processes](https://www.wearedevelopers.com/videos/1579-pragmatic-blockchain-design-patterns-integrating-blockchain-into-business-processes) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)